Texoma Community Center

The covered entity (CE), Texoma Community Center, reported that several employees were the subjects of an email phishing attack that affected the protected health information (PHI) of 24,021 individuals. The PHI involved included names, Social Security and drivers’ license numbers, dates of birth, addresses, diagnoses, medications, email addresses, health insurance information, financial information, and other demographic and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice on its website. In response to the breach, the CE implemented additional administrative, technical, and security safeguards, and retrained workforce members on email security.